Privacy Policy

Last updated: April 13, 2026

1. Introduction

This Privacy Policy describes how Newstats, a company registered in Ireland ("we", "us", "our"), collects, uses, and protects your personal data when you use the HoopsAPI service and website at hoopsapi.com ("Service"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Irish and EU data protection law.

2. Data Controller

Newstats is the data controller for personal data collected through the Service. Contact: contact@newstats.eu.

3. Data We Collect

Account data

When you sign up, we collect your name and email address via our authentication provider (Clerk). If you sign up with Google, we receive your name, email, and profile picture from Google.

Billing data

Payment information is processed by Stripe. We do not store credit card numbers. We retain your Stripe customer ID for billing purposes.

Usage data

We record API usage (request counts, endpoints accessed) for rate limiting and analytics. API keys are stored to authenticate your requests.

Cookies

We use essential cookies for authentication (Clerk session cookies) and the Tawk.to live chat widget. No advertising or tracking cookies are used.

4. How We Use Your Data

  • To provide and maintain the Service
  • To authenticate your API requests
  • To process payments and manage subscriptions
  • To enforce rate limits and usage policies
  • To communicate with you about your account (e.g. billing, security)
  • To respond to support inquiries

5. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract: processing necessary to provide the Service you signed up for
  • Legitimate interest: fraud prevention, security, and service improvement
  • Legal obligation: tax and financial record-keeping

6. Sub-processors

We use the following third-party services that process your data:

ServicePurposeLocation
ClerkAuthentication and user managementUSA
StripePayment processingUSA
UnkeyAPI key management and rate limitingUSA
SupabaseDatabase hostingEU
CloudflareHosting, CDN, and securityGlobal
Tawk.toLive chat supportUSA

Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or equivalent safeguards as provided by these processors.

7. Data Retention

  • Account data: retained for as long as your account is active, plus 30 days after deletion
  • Billing data: retained as required by tax law (typically 6 years in Ireland)
  • Usage data: retained for 90 days for analytics, then aggregated

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Eraseyour data ("right to be forgotten")
  • Restrict processing
  • Data portability — receive your data in a structured format
  • Object to processing based on legitimate interest

To exercise any of these rights, email contact@newstats.eu. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure credential storage, and access controls. API keys are stored securely and can be revoked at any time.

10. Children

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the email associated with your account. The "Last updated" date at the top reflects the most recent revision.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.

13. Contact

For questions about this Privacy Policy or your personal data, contact us at contact@newstats.eu.